Quantum vs. Classical Communication and Computation 



Harry Buhrman* 
CWI 



Richard Cleve^ 
University of Calgary 



Avi Wigderson^ 
Hebrew University 



Abstract 

We present a simple and general simulation technique that trans- 
forms any black-box quantum algorithm (a la Graver's database 
search algorithm) to a quantum communication protocol for a re- 
lated problem, in a way that fully exploits the quantum parallelism. 
This allows us to obtain new positive and negative results. 

The positive results are novel quantum communication proto- 
cols that are built from nontrivial quantum algorithms via this sim- 
ulation. These protocols, combined with (old and new) classical 
lower bounds, are shown to provide the first asymptotic separa- 
tion results between the quantum and classical (probabilistic) two- 
party communication complexity models. In particular, we obtain 
a quadratic separation for the bounded-error model, and an expo- 
nential separation for the zero-error model. 

The negative results transform known quantum communica- 
tion lower bounds to computational lower bounds in the black-box 
model. In particular, we show that the quadratic speed-up achieved 
by Graver for the OR function is impossible for the PARITY func- 
tion or the MAJORITY function in the bounded-error model, nor 
is it possible for the OR function itself in the exact case. This di- 
chotomy naturally suggests a study of bounded-depth predicates 
(i.e. those in the polynomial hierarchy) between OR and MAJORITY. 
We present black-box algorithms that achieve near quadratic speed 
up for all such predicates. 
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1 Introduction and summary of results 

We discuss our results about quantum communication complexity 
and quantum black-box algorithms in separate subsections. Re- 
garding quantum communication complexity, Subsection 1.1 con- 
tains a background discussion and Subsection 1.2 states our results. 
Regarding quantum black-box algorithms, Subsection 1.3 contains 
a background discussion and Subsection 1.4 states our results. The 
results are all proven in Sections 2 and 3. 

1.1 Quantum communication complexity 



The recent book by Kushilevitz and Nisan [KN97] is an excellent 
text on communication complexity. As usual, two parties, Alice 
and Bob, wish to compute a boolean function on their iV-bit in- 
puts using a communication protocol. It will be convenient to let 
N — 2" and think of Alice and Bob's iV-bit inputs as functions 
/, g : {0, 1}™ — > {0, 1} (e.g., when n = 2, / represents the 
four-bit string /(00)/(01)/(10)/(ll)). Examples of well-studied 
communication problems are: 

• Equality: EQ(f,g) = A Ke {o,i}™ (/(«) = sC 5 ")) 

• Inner product: IP(f,g) = xg{Oil} „ (/O) A g(x)) 

• Disjointnessf} DISJ(f,g) = \/ x€{0 , 1} Af(x) A g(x)). 

Classical communication protocols were defined by Yao[ |Ya79p . 
In an m-bit deterministic protocol, the players exchange m (classi- 
cal) bits according to their individual inputs and then decide on an 
answer, which must be correct. In an m-bit probabilistic protocol, 
the players are allowed to flip coins to decide their moves, but they 
still must exchange at most m bits in any run. The answer becomes 
a random variable, and we demand that the answer be correct with 
probability at least 1 — e (for some e > 0) for every input pair. 
Note that if e is set to then probabilistic protocols are not more 
powerful than deterministic ones. 

An alternative measure of the communication cost of a prob- 
abilistic protocol is to take the expected communication cost of 
a run, with respect to the outcomes of the coin flips (rather than 
the worst-case communication cost of a run). In this case, prob- 
abilistic protocols with error probability zero may be more pow- 
erful than deterministic protocols. Another alternate definition for 
probabilistic protocols is where the players share a random string. 
This model has been shown to have the same power as the above 

x In fact this defines the complement of the set disjointness problem. 
Since for the models we study the communication complexity of DISJ and 
its complement are equal our results hold for both. 



bounded-erro r mod el whenever the communication complexity is 
above log N | Ne91 ]. 

For a communication problem P, and e > 0, let C £ (P) denote 
the minimum m such that there is a (probabilistic) protocol that re- 
quires at most m bits of communication and determines the correct 
answer with probability at least 1 — e. Then Co(P) can be taken 
as the deterministic communication complexity of P (sometimes 
denoted as D(P)). Also, let C{P) denote C 1/S (P), the bounded- 
error communication complexity of P. Clearly, C(P) < Co{P), 
and there are instances where there are exponential gaps between 
them. Furthermore, let Cq(P) denote the minimum expected com- 
munication for probabilistic errorless protocols, frequently called 
the zero-error communication complexity. According to our defi- 
nitions, §C(P) < Ci(P) < Co (P). 

For the aforementioned problems, the following is known. 



Theorem 1.1: [Ya79] C (EQ) = Cq(EQ) = N, but C(EQ) G 
0(log TV). 



of conveying m bits. In this model, they demonstrated a three- 
party communication problem where the prior entanglement re- 
duces the required communication complexity by one bit. Buhrman 
[Bu97] showed that, in this model, the separation between quan- 



tum vs. classical communication costs can be as large as 2n vs. 3n. 
Also, van Dam, H0yer, and Tapp [ DHT97 ] showed the first instance 



where the reduction in communication can be asymptotically large 
in a multi-party setting. They showed that, for a particular fc-party 
scenario, the quantum vs. classical communication cost is roughly 
k vs. k log k (note that this falls short of an asymptotic separation 
when the number of parties is fixed). 

1.2 Our results in quantum communication complexity 

We prove some asymptotic gap theorems between quantum and 
classical two-party communication. The first is a near quadratic 
gap for the bounded-error models (and also happens to be a near 
quadratic gap between Q and Qo). 



Theorem 1.2: [CG88] C(IP) G Q(N) 



Theorem 1.6: Q(DISJ) G 0(VN log N) and 
Qo(DISJ) G 0(N). 



Theorem 1.3: [KS87 Ra Z 9C ] C{DISJ) G fi(JV) 



Yao [Ya93] also introduced a quantum communication com- 
plexity model, where Alice and Bob are allowed to communicate 
with qubits rather than bits. It is not immediately clear whether 
using qubits can reduce communication because a funda mental re- 
sult in quantum information theory by Holevo [ Hol73| ] (see also 
[ ^C94 ]) implies that by sending m qubits one cannot convey more 
than m classical bits of information. Yao's motivation was to prove 
lower bounds on the size of particular kinds of quantum circuits that 
compute the MAJORITY function, and he accomplished this via a 
qubit co mmun ication complexity lower bound. The MSc thesis of 
Rremer [ |Sj95| | includes several important definitions and basic re- 
sults. 

Denote by Q S (P) the minimum m for which there is a protocol 
for P involving m qubits of communication with error probability 
bounded by e. Let Q(P) denote Qi/z{P), the bounded-error com- 
munication complexity of P. Also, call Qo(P) the exact commu- 
nication complexity of P. It turns out that one of the differences 
between the quantum scenario and the classical probabilistic sce- 
nario is that Qo(P) is not the same as the deterministic communi- 

below), whereas Co(P) 
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cation complexity of P (see Theorem 
is. 

A basic result is that quantum protocols are at least as powerful 
as probabilistic ones. 



Fact 1.4: [ Kr9!fy For every problem P on n-bit inputs, Q(P) < 
C(P)andQoJP) < C (P). 

Rremer also presents the following lower bound (whose origin he 
attributes to Yao). 



Theorem 1.5: [Kr95] (see also [CDNT9/]) Q(IP) G Q(N) 



Rremer leaves open the question of whether the quantum (qubit) 
model is ever more powerful than the classical bit model for any 
communication problem. 



Cleve and Buhrman [ 2B97 ] (see also [ BCD97 ]) showed the 
first example where quantum information reduces communication 
complexity. They considered a different model than that of Yao, 
the entanglement model, where the communication is restricted to 
classical bits; however, the parties have an a priori set of qubits in 
an entangled quantum state. As with the qubit model, there are no 
trivial communication advantages in the entanglement model, be- 
cause a prior entanglement cannot reduce the communication cost 



This, combined with Theorem 1.2, results in a near quadratic 
separation between classical bounded-error communication com- 
plexity and quantum bounded-error communication complexity. 

Our second theorem is an exponential gap between the exact 
quantum and the zero-error classical model. For this, we need to 
define a partial function. Let A(/, g) denote the hamming distance 
between the two functions /, g (viewed as binary strings of length 
N = 2"). Define the partial function EQ' as 

FO'ifn^-i 1 ifA (/.S) = 
h-UU,9)-\q tf A(f,g) =2 n -\ 

For a partial function all communication definitions above extend 
in the natural way, demanding correct (or approximately correct) 
answers only for pairs on which the partial function is defined. 

Theorem 1.7: Qo(EQ') G O(logJV), but C (EQ'), Cq(EQ') G 

n(N). 



Finally, we generalize Theorem 1.6 to balanced, constant depth 
formulae. 

Theorem 1.8: Let F be any balanced depth-d AC formula (i.e. 
formula with unbounded fan-in A and V gates) with N leaves, 
and L : {0, l} 2 — » {0, 1}. Then the communication problem 
P(f,g) = F{L{f,g)) has complexity O^log^ 1 (N)). 

The classical lower bounds will appeal to known techniques 
and results in communication complexity and combinatorics. The 
quantum upper bounds will follow from a reduction from commu- 
nication problems to computational problems where the input is 
given as a black-box, in conjunction with known quantum algo- 
rithms for these prob lems — and a new quantum algorithm in the 
case of Theorem |l.8[ The reduction is presented in Theorem 
Section ^ Applying this reduction in its reverse direction enables 
us to translate lower bounds for quantum communication problems 
into lower bounds for black-box computations. 

1.3 Black-box quantum computations 

All the upper bounds on communication complexity will come from 
a simulation of quantum circuits whose inputs are functions that 
can be queried as black-boxes. Releva nt definitions /and some 
lower bound techniques) may be found in JB V93| , ^B9^ [BBB V97| , 



For / : {0, 1}' 
mapping such that 



{0, 1}, define an f-gate as the unitary 



U f : \x)\y) ^ \x)\f(x)®y), 



(1) 



for all x G {0, y G {0, 1}. For the initial state with x G 
{0, l} n and y = 0, this mapping simply writes the value of fix) 
on the n + 1 st qubit; however, for this gate to make sense when 
evaluated in quantum superposition, it must also be defined for the 
y = 1 case as well as be reversible. 

A quantum circuit (or gate array) G with input given as a black- 
box operates as follows. It begins with a set of qubits in some initial 
state (say, |0, . . . , 0}) and performs a sequence of unitary transfor- 
mations to this state. These unitary transformations are from a des- 
ignated set of "basis" operations (say, the set of all operations corre- 
sponding to "two-qubit gates"), as well as /-gates. At the end of the 
computation, the state is measured (in the standard basis, consist- 
ing of states of the form \xi, . . . ,x m ), for Xi, . . . ,x m G {0, 1}), 
and some designated bit (or set of bits) is taken as the output. De- 
note the output of G on input f as G(f) (which is a random vari- 
able). 

Let Ti be a collection of functions. We say that a quantum 
circuit G computes a function F : Tt — > 5* with error e if, for 
every h 6 H, Pr[G(/i) = F(h)] > 1 - e. We denote by T £ (F) 
the minimum t (time, or, more accurately, number of black-box 
accesses) for which there is a quantum circuit that computes F with 
error e. We call To(F) the exact quantum complexity of F, and we 
call T(F) — Ti/ S (F) the bounded-error quantum complexity of 
F. 

Here are three well-known examples of nontrivial quantum al- 
gorithms (and precious few others are known). For these problems, 
classical (probabilistic) computations require <9(2 n ), 0(\/2™"), and 
0(2") black-box queries (respectively) to achieve the same error 
probability as the quantum algorithm. 

• Half or None Here Tt consists of the constant function 
and all "balanced" functions (i.e. h's which take on an equal 
number of 0s and Is). The function BAL takes the value 1 if 
h is balanced and otherwise. 



Theorem 1.9: / DJ92 ] To (BAL) 



• Abelian Subgroups Here Tt are all functions h : {0, 1}™ — > 
{0, 1} for which there exists a subgroup K of (repre- 
sented by {0, 1}™) such that h(x) = h(y) iff x + y G K. 
STAB(h) is a specification of K. 



Theorem 1.1ft T(STAB) G 0{n). 

This theorem has been ge neraliz ed (appropriately) to other 
Abelian groups by Kitaev [ Ki95 1. 



• Database Search Here Ti contains all possible functions h : 
{0, 1}" -> {0, 1} and 

OR(f) = V 

Based on a technique introduced by Grover and later refined 
by Boyer et al, it is straightforward to construct a quantum 
algorithm that solves OR with the following efficiency. 



Theorem 1.11: ^Gr9j )BBHT9(fy T(OR) G 0(\/2"). 



1.4 Our results about black-box quantum computations 



Define 



PARITY(f)= f{x) 



PARITY is at least as hard as OR (in t he bounded-error case) by a 
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result of Valiant and Vazirani [ VV86]. In view of Theorem 
it is natural to ask whether Grover s technique can somehow be 
adapted to solve PARITY with quadratic speedup — or at least to 
solve PARITY in 0((2") r ) steps for some r < 1. We show that 
this is not possible by the following. 

Theorem 1.12: TiPARITY) G 0(2 n /n). 



Also, define 



MAJORITY if) = { 1 lf S^s{o 
1. otherwise 



i}' 



/(*) > 2" 



Theorem 1.13: TiMAJORITY) G n(2 n /n 2 log(n)). 



1.11 



to 1.13, we in- 



Considering this dichotomy among Theorems 
vestigate the bounded-depth predicates (i.e. the polynomial-time 
hierarchy). First, define SIGMA2, on functions / : {0, l} r ' 
{0, 1} as 



SIGMA 2 if) -- 

V 

zefo,!}™ 



f\ f(xi,...,x„- m ,yi,' 



,Vm) 



(2) 



(where m G {0, . . . , n} is an implicit parameter of 5/GMA2). Let 
PI 2 be the negation of SIGMA 2 . Both PI 2 and SIGMA 2 have clas- 
sical complexity 0(2"). Is a near square root speed up possible for 
these problems? We shall show 



Theorem 1.14: T(5/GMA 2 ) G 0(V2 n n). 

More generally, for the appropriate generalization to higher levels 
of the polynomial-hierarchy, define for d alternations 



SIGMA d if) 




A /(* (1) > 

x ( . d ) e{o,i} m <i 



(3) 



(where mi , . . . , mj are implicit parameters with mi + 7712 + ■ ■ ■ + 
m d = n), andW d is the negation of SIGMA d . Note that 5/GMAi = 
OR and Ph is equivalent to AND. 



Theorem 1.15: TiSIGMA d ) G 0(V2™ n" -1 ) and 



T{PI d ) G 0(V2" n d - 1 ). 

This is a near square root speed up for any fixed value of d. 

Moreover, if we are willing to settle for speed up by a root 
slightly worse that square, such as 0((2 n ) 1 ^ 2+ ' 5 ) steps (for some 
fixed 8 > 0), then the error probability can be double exponentially 
small! 

(n/5d)-l 

Theorem 1.1ft Fore = 1/2 2 TJwaMA A a n( (9^^1/2+1^ 



Finally, in sharp contrast with Theorem 
have 



T £ iSIGMA d ) G 0((2") 
and Theorem 



1.11 



1.16, we 



Theorem 1.17: T (CW) G fi(2"/n). 



2 Reducing communication to computation problems 

In this section, we prove a central theorem of this paper, which is 
essentially a simulation technique that transforms quantum algo- 
rithms for black-box computation to quantum communication pro- 
tocols. While the idea of the simulation is extremely simple, we 
stress that it utilizes quantum parallelism in full. 

This enables us to obtain new quantum communication proto- 
cols by applying the simulation to known quantum algorithms. We 
can also apply this technique in the reverse direction to use lower 
bounds for quantum communication protocols to derive lower bounds 
for quantum computation. 

Let T„ denote the set of all functions / : {0, 1}™ — ► {0, 1}. 

Theorem 2.1: Let F : T n -> {0, 1} and L : {0, 1} x {0, 1} -» 

{0, 1}. L induces a mapping Tn x Tn — > Tn by pointwise ap- 
plication: L(g,h)(x) = L(g(x),h(x)), for all x £ {0,1}™. If 
there is a quantum algorithm that computes F(f) for input f using 
t f-gate calls then there is a t(2n + 4) quhit communication pro- 
tocol for the following problem. Alice gets g, Bob gets h and the 
goal is for Alice to determine F(L(g, h)). Furthermore, if the al- 
gorithm succeeds with a certain probability then the corresponding 
protocol succeeds with the same probability. 

Proof: Consider the quantum circuit G that computes F(f), with 
t /-gate calls. In the communication protocol, Alice simulates the 
quantum circuit G with / set to L(g, h). She communicates with 
Bob only when an L(g, /i)-gate call is made (for which she needs 
Bob's help, since she does not know h). Note that Alice has suffi- 
cient information to simulate a <?-gate and Bob has enough informa- 
tion to simulate an /i-gate. Each L(g, /t)-gate call is simulated by 
the following procedure for the state \x)\y) (for each x £ {0, 1}™ 
and y £ {0, 1}). 



1. Alice sets an "ancilla" qubit to state |0). 

2. Alice applies the mapping |a;)|y)|0) i- 
then sends the n + 2 qubits to Bob. 



\ x )\y)\g( x ))' and 



3. Bob applies \x)\y)\g(x)) ^ \x)\L(g(x), h(x)) © y)\g(x)), 
and then sends the n + 2 qubits back to Alice. 

4. Alice applies \x)\L(g(x),h(x)) © y)\g(x)) t— > 
\x)\L(g(x),h(x))(By)\0). 

This involves 2n + 4 qubits of communication. Therefore, the total 
amount of communication is t(2n + 4) qubits. | 



Note that it is simple to generalize Theorem 2.1 to functions 
whose range is an arbitrary set S instead of {0, 1), and any L : 
SxS^{0,l}. 

3 Proofs of upper and lower bounds 

Proof of Theorem [T| 

The uppe r bounds follows directly from the simulation result 
Theorem 



2.1 



with L being the binary AND function and F the 2™ 
ary OR function, tog ether with the quantum algorithm for OR re- 
ferred to in Theorem 



1.11 



The lower bound on O iDlSJ ) is the wel l known result of Kalyana- 
sundaram and Schnitger [ ^CS87 ] (see also [Raz9C]), stated in The- 
orem 1.3. 



It rem ains to prove the linear lower bound on Qo- By results 
in [Kr95], it is straightforward to see that see that a zero-error m- 



qubit quantum protocol for a communication problem P puts an 
upper bound of 2°^ on the rank (over the reals) of the matrix 
describing P (more details will be provided in the final version). It 



is well known that the set disjointness matrix has full rank over the 
reals, which gives m = fi(n). 

Proof of Theorem O 

The uppe r bound follows directly from the simulation result 
Theorem U with L being the binary XOR function and F the N- 
way OR function (restricted to balanced o r zero inputs), together 
with the Deutsch-Jozsa algorithm for F [ DJ92 ] stated in Theo- 
rem |l.9[ We observe that the algorithm accesses the .F-gate only 
once, and in fact a 1-way communication protocol of 0(log N) 
qubits can be obtained in this case. 

For the lowe r boun d we need the following strong result of 
Frankl and Rodl JFR87| ], which seems tailo - -made for our needs. 



Theorem 3.1: [ fR87y Let n be divisible by 4. Let S,TC {0, 1}™ 
be two families of n- bit vectors, such that for every pair s £ S,t £ 
T we have A{s,t) / n/2. Then \S\ x \T\ < 4' 96n . 

Consider any deterministic protocol for EQ' of complexity less 
than n/100. Take the largest rectangle answering 1, and let its 
sides be the subsets S, T. Since there are 2™ 1 answers, and they 
lie on the diagonal, we must have \S\ x \T\ > 4 98n . On the other 
hand, since this algorithm makes no error, this rectangle has no 
entry, which means that for every pair s £ S, t £ T we have 
A(s, t) 7^ n/2, which is a contradiction. 

For the probabilistic, zero-error lower bound, it suffices to give 
a distribution which is hard on average for deterministic protocols. 
Observe that the argument above shows that the depth of every 1- 
leaf of any protocol which is always correct, is at least n/100. By 
considering an input distribution which places half the weight on 
each of the two output values, and then uniformly on the input pairs 
for each output, requires average communication n/100 — 1 in ev- 
ery such protocol. 

Proof of Theorem 
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The uppe r bound follows directly from the simulation result 
Theorem Ejl with L being the binary AND function and F the AC 
formula corres ponding a SIGMAd or PId predicate, together with 
Theorem 1.15. 



Proof of Theorem [Tl| 

Let F(f) be PARITY(f). 
rithm for F that makes t /-gate calls. Apply Theorem 2.1 



Suppose we have a quantum algo- 
Let L 



be the AND function and observe that F(L(g, h)) is the inner prod- 
uct communication problem. An application of the lower bound for 



Q(IP), Theorem 1.5 yields that t £ fl{2 n /n). 



1.13 



Proof of Theorem 

The problem of computing PARITY with error 4 can be re- 
duced to n instances of computing MAJORITY with error 0(— ). 
The latter problem reduces to 0(log n) instances of computing 
MAJORITY with error | . Therefore, in the bounded-error model, 
PARITY is reducible to n lo g n in stances of MAJORITY. The result 
now follows from Theorem 1.1 4 



Proof of Theorem [L"i4| 

The basic approach is to define 

g(xi,...,x n -m) = f\ f(xi,...,x n -m,yi,...,y m ) 

!/e{o,i} m 

^ a. (4) 

and then fi rst us e Boyer et al.'s [ BBHT9q ] extension of Grover's 
technique | |Gr96| ] (in a way that does not involve measurements) to 
simulate an approximate <?-gate within accuracy e/V2 n_m . More 
precisely, a (/-gate is a unitary transformation 



U a 



X!, 



1 )\z(Bg(x)}, (5) 



and we'll simulate a unitary transformation V such that \\U g — 
y\\ 2 < e/V2 n ~ m (where || ■ 1 1 2 is the norm induced by Euclidean 



distance). We'll see that this can be accomplished unitarily with 
0(\/2 m n) accesses to the /-gate. 

Then the Grover technique is applied to compute 



(6) 



a;e{0,l}"- 



with 0(V2 n ~ m ) calls to the <?-gate. Due to the accuracy of our 
simulated approximate gr-gate calls, they can be used in place of 
the true g-gate calls, and the resulting total accumulated error in 
the final state will be bou nded by f This follows from the unitar- 
ity of the operations (see [BBBV97]). This inaccuracy affects the 
correctness probability of the final measured answer by at most 2e. 

It remains to show how to compute the approximate g-gates. 
In [ |BBHT96 1, it is shown that the Grover search procedure can 
be implemented so as to find a satisfying assignment (whenever 
one exists) of an m-variable function with an expected number 
of 0(\/2 m ) calls to that function (and this holds without know- 
ing anything about the number of satisfying assignments). Their 
procedure essentially involves a sequence of independent runs of 
Grover's original procedure for various carefully chosen run lengths. 
By stopping this after an appropriate number of runs, we obtain a 
procedure that, with c\j2 m black-box calls, decides the satisfiabil- 
ity of the function with error probability at most | (and only errs 
in the case of satisfiability). By repeating this k times, we obtain 
a procedure that, with ck\/2 m queries, decides the satisfiability of 
the function with error probability at most 2~ k . This procedure will 
involve several intermediate measurements; however, by standard 
quantum computing techniques, the procedure can be modified so 
that it runs for a purely unitary stage, G, followed by a single mea- 
surement step. 

In our context, G can be thought of as being applied on an ini- 
tial quantum state of the form \xi, . . . , x n - m ) |0, . . . , 0), (for some 
xi, ... , Xn-m £ {0, 1}) and making calls to /-gates, with the first 
n — m inputs of / always set to state \xi, . . . , x n - m ). What we 
know about the state after applying G is that, if its first qubit (say) is 
measured, the result will be g(x) with probability at least 1 — 2~ fc . 
This means that, after applying G to \xi, . . . , x n _ m ) |0, . . . , 0), but 
prior to any measurements, the state must be of the form 



a\g(x))\A) + f3\g(x))\B), 



(7) 



where \a\ 2 > 1 - 2~ k and |/3| 2 < 2~ k . 

Now, consider the following construction. Introduce a new 
qubit, in initial state \z) (for some z £ {0, 1}) and apply the fol- 
lowing steps to the state |z)|xi, . . . , x n - m ) jO, . . . , 0): 

1. Apply G. 

2. Perform a controlled-NOT with the first qubit as target and 
the second qubit as control (recall that here the second qubit 
contains the "answer" g(x)). 

3. Apply G+. 

(We'll show that this approximates the g-gate.) Let us trace through 
the evolution of a basis state \z) \x\, . . . , x n - m ) jO, . . . , 0) . After 
the G operation, the state is 



\z) (a\g(x)}\A) + 0\g(x)}\B)) 
After the controlled-NOT gate, the state is 



(8) 



a\z © g(x))\g(x))\A) + f3\z © g{x))\g(x))\B) 
= a\z © g(x))\g{x))\A) + f3\z® g(x))\gJxj)\B) 



p\x © g{x))\g{x))\B) + p\z © g(x))\g(x))\B) 
\z®g(x)} (a\g(x))\A) + 0\jrfx))\B)) + (9) 

V2/3 ^\z®g(x)) - ±>\z © g(x)}) \~gJxj}\B). 



In this form, it's easy to see that, after applying G^, the state is 

\z®g{x))\x u ... }|0,...,0>+ (10) 

V2P ©<?(*)> ^ js\x © ff (z)>) G f \glxj)\B). 

The Euclidean distance between this state and the state that a true 
g-gate would produce is \/2|/3j < V2 ■ 2~ k ^ 2 . The above distance 
holds for any initial basis state jz)ja;i, . . . , a; n _ m )|0, . . . , 0); how- 
ever, the distance might be larger for non-basis states. In general, 
the input to a g-gate is of the form 



E 

= e{",i) 

r6{0,l}»-' 



X z , x \z)\xi 



,)|0,...,0), (11) 



where J] z6{01} ;cS{01} „_ m \\ z , x \' 2 = 1. In this case, the differ- 
ence between the output state of the true <?-gate and our approxi- 
mation to it is still bounded by 



E 



\X Z , X \V2- 2~ k/2 < V2"- m +! -V2-2' k 



/2 



= 2" 



(12) 



Now, in order to make this quantity bounded by e/V2 n ~ m , b 
suffices to set k > 2(n — m) + 2 log(2/e). 

Thus, the total number of /-gate calls is 0(V2 n ~ m -2c 
(2(n - m) + 21og(2/e)) • ^2^) C 0(^2™ n), as claimed. 



Theorem 



Proof of Theo rem 1.15 This is a straightforward generalization of 
1.14 For each i £ {1, . . . , d}, define 



g^(x^,x^,...,x^ 



) = 



V 



A /(« 



ID 



(13) 



(where the A and V qu antifiers are appropriately placed). As in the 
proof of Theorem 1.14 , an approximation of g^ is first constructed 
at a cost of ckd y / 2 m d. Then this is used to approximate g d ~ ^ with 
cost (cka- i V 2 md - 1 ) {ckd \/2 m <J ) , and so on, up to g^ 1 whose 
value is the required answer. It suffices to set fo, . . . , kd to 5n and 
to set k\ to a constant. 

Proof of Theorem 



1.16 



1.15 



except that the 



1.6 in con- 



This is similar to the proof of Theorem 
parameters ki, . . . , kd are all set to 2"^ Sd . 

Proof of Theorem [Til 

This follows from the zero-error part of Theorem 
junction with Theorem |2.l| . 

4 Conclusions and open problems 



We have constructed a reductions from quantum communication 
problems to quantum black-box computations. Using known quan- 
tum algorithms, this reduction enabled us to prove a near quadratic 
gap between bounded error classical communication complexity 
and bounded error quantum communication complexity. Using a 
partial function we also showed an exponential gap between zero- 
error classical communication co mplex ity and exact quantum com- 
munication complexity. Kremer | ]Kr95 ] shows that the gap between 
the two models can never be bigger than exponential, so this result 
is optimal. Several problems however remain: 



• Is there an exponential gap between the exact and the zero- 
error model wi th a total ins tead of a partial function? A re- 
cent result by [BBCMW98] shows that for any total black- 
box problem if there is a quantum algorithm that computes 
this problem with T oracle calls then there is a determinis- 
tic classical algorithm that computes it with 0(T 6 ) oracle 
calls. This results shows that the approach taken here (re- 
duce a communication problem to a black-box problem) will 
for total functions never yield more than a polynomial (sixth 
root) gap. 

• Is the upper bound for D1SJ optimal? 

• Is there a bigger than quadratic gap for the bounded-error 
models (with total or partial functions)? 

We used the reduction from communication problems to black- 
box computation in the reverse order to obtain non-trivial lower 
bounds for PARITY and MAJORITY. These bound s have rece ntly 
been improv ed to optimal for PARITY ]BBCMW98| , ^GGS98| | and 
MAJORITY [bBCMW98|]. 
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